CVE-2014-2087

Stack-based buffer overflow in the CDownloads_Deleted::UpdateDownload function in Downloads_Deleted.cpp in Free Download Manager 3.9.3 build 1360, 3.8 build 1173, 3.0 build 852, and earlier allows user-assisted remote attackers to execute arbitrary code via a long file name, which is then deleted from the download queue by the user.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

16.73% chance of exploitation in the next 30 days, 97th percentile

Published

2014-03-18

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/32332

References

• CVE Record
• NVD entry

Related

• CVE-2014-2084
• CVE-2014-2088
• CVE-2014-2081
• CVE-2014-2089
• CVE-2014-2073
• CVE-2014-2090